Particle.news

Download on the App Store

New 'GoFetch' Vulnerability in Apple Silicon Exposes Encryption Keys

Researchers uncover a hardware-level flaw in Apple's M-series chips that cannot be patched, posing a potential risk to cryptographic data security.

  • A newly discovered vulnerability in Apple Silicon, named 'GoFetch,' allows attackers to bypass encryption and access cryptographic keys.
  • The flaw affects M1, M2, and M3 chips and is unpatchable due to its hardware-based nature, leaving current devices vulnerable.
  • Researchers suggest software-based mitigations to reduce risk, but these could significantly impact performance.
  • Intel's Raptor Lake CPUs also feature the DMP responsible for the vulnerability, but their implementation prevents the attack.
  • The vulnerability recalls previous significant CPU flaws like Spectre and Meltdown, highlighting ongoing security challenges in chip design.
Hero image